[jira] [Comment Edited] (OFBIZ-12226) Secure Gl passed to URL - follows deletion of 10015 - COGS avg cost adjustment

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-12226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17338820#comment-17338820 ]

Jacques Le Roux edited comment on OFBIZ-12226 at 5/4/21, 9:23 AM:
------------------------------------------------------------------

HI Jacques

I used the delete button on the GL maintenance screen.  maybe of interest I'd tried to tunr on BIRT before hand,  and found that it led to a lot of errors (ofbiz kept trying to write to olap tables and there were FK issues). I turned off BIRT and the GL issue occured a short while later .  I've not had the error since turning off BIRT

kind regards
Ernest

 


was (Author: ernesthocking):
HI Jacques

 

I used the delete button on the GL maintenance screen.  maybe of interest I'd tried to tunr on BIRT before hand,  and found that it led to a lot of errors (ofbiz kept trying to write to olap tables and there were FK issues). I turned off BIRT and the GL issue occured a short while later .  I've not had the error since turning off BIRT

 

kind regards

 

Ernest

 

> Secure Gl passed to URL - follows deletion of 10015 - COGS avg cost adjustment
> -------------------------------------------------------------------------------
>
>                 Key: OFBIZ-12226
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12226
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: accounting
>    Affects Versions: Release Branch 17.12
>            Reporter: Ernest Hocking
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> The Following Errors Occurred:
> Error calling event: org.apache.ofbiz.webapp.event.EventHandlerException: Found URL parameter [glAccountTypeId] passed to secure (https) request-map with uri [createGlAccountTypeDefault] with an event that calls service [createGlAccountTypeDefault]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices Thank you in advance for your help.

--
This message was sent by Atlassian Jira
(v8.3.4#803005)